QUESTION 101 Hotspot Questions You have a folder that you plan to share. You need to configure security for the shared folder to meet the following requirements: – Members of a security group named Group1 must be able to modify permissions of files and folders. – Members of a security group named Group2 must be able to read files and folders only. – Members of a security group named Group3 must be able to take ownership of files. What should you do? (To answer, select the appropriate options in the answer area.) Answer:

QUESTION 102 Hotspot Questions Your network contains an Active Directory forest named adatum.com. The forest contains three domains named adatum.com, na.adatum.com, and eu.adatum.com. You have a client computer named Computer1 that runs Windows 8 Enterprise. Computer1 is a member of the na.adatum.com domain. You need to ensure that single-label names can be resolved from all three domains. Which setting should you configure? (To answer, select the appropriate setting in the answer area.) Answer:

QUESTION 103 Hotspot Questions Your company plans to deploy Windows 8 Enterprise to all client computers. Users in the development department and the sales department will each receive a laptop that runs a corporate image of Windows 8 Enterprise. In addition to running the corporate image of Windows 8 Enterprise, the users have the requirements described in the following table. You need to recommend the appropriate technology for each department. What should you recommend? (To answer, select the appropriate technology for each department in the answer area.) Answer:

QUESTION 104 Drag and Drop Questions Your network contains an Active Directory domain. The domain contains client computers that run Windows 8 Enterprise. Your company has a subscription to Windows Intune. You plan to deploy an application named App1 that is stored on a Web server named Server1. You need to ensure that all of the computers download the source files of App1 from Server1. Which four actions should you perform in sequence? (To answer, move the appropriate four actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Box 1: Box 2: Box 3: Box 4: Explanation: Note: Step 1: All software installer types are configured using the Windows Intune Software Publisher. To start the Windows Intune Software Publisher 1. Open the Windows Intune administrator console. 2. In the workspace shortcuts pane, click the Software icon. 3. Start the Windows Intune Software Publisher in one of the following ways: In the navigation pane, click Overview , and then click Add Software . In the navigation pane, click Managed Software , and then click Add Software . Step 2: Adding Software as an External Link This section describes how to add a link to a software installation package to Windows Intune using the Windows Intune Software Publisher. To specify the installer type 1. Open the Windows Intune Software Publisher. 2. On the Software setup page, in Select how this software is made available to devices , se-lect External link . 3. In Specify the URL , type the full path to the installation location in the app store, or the full path to the web app location. The path must be in the format http://www.<address> . 4. Click Next . Step 3: The following procedures describe how to upload a Windows Installer (*.exe or *.msi) package to Windows Intune by using the Windows Intune Software Publisher. To specify the installer type 1. Start the Windows Intune Software Publisher. 2. On the Software setup page, in Select how this software is made available devices , se-lect Software Installer . In Select the software installer file type , select Windows Installer (*.exe, *.msi) . 3. In Specify the location of the software setup files , enter the full path to the location of the .exe or .msi installation files, or clickBrowse to navigate and select to the folder where the setup files are stored. If additional files and subfolders are required for this installation, click Include additional files and subfolders from the same folder . 4. Click Next . Step 4: To review the software specifications and upload the software 1. On the Summary page, review the software settings that you specified. You can scroll down as needed to view the complete summary. 2. To change any setting, click the appropriate page in the page navigation pane and then edit the selections on the displayed page. 3. When you have completed all of the software specifications, clickUpload . The Upload page displays the status of the software as it uploads to Windows Intune. Reference: Adding Software Packages in Windows Intune

QUESTION 105 Hotspot Questions You have client computers that run Windows 8 Pro. All of the computers are members of an Active Directory domain. The Folder Redirection Policy settings of all domain users are configured as shown in the Folder Redirection exhibit. (Click the Exhibit button.) You enable and configure the Configure slow-link mode Group Policy setting that applies to all of the computers as shown in the Slow-link mode exhibit. (Click the Exhibit button.

To answer, complete each statement according to the information presented in the exhibits. Each correct selection is worth one point. Answer: QUESTION 106 Hotspot Questions Your company has a main office and a branch office. You have client computers that run Windows 8 Enterprise. You are evaluating whether to disable IPv6 on the client computers in the sales, marketing, research, and finance departments. Each user in the sales department has a laptop and frequently accesses the network by using a PPTP VPN connection. Each user in the marketing department has a desktop computer located in the branch office. All of the marketing department computers are configured to use BranchCache. Each user in the research department has a desktop computer located in the main office and uses IPSec to access research servers. Each user in the finance department has a laptop and frequently accesses the network by using an SSTP VPN connection. In the table below, identify which departments require IPv6 and which departments do not require IPv6. Make only one selection in each row. Each correct selection is worth one point. Answer:

To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point.

Answer:

QUESTION 108 You are a systems administrator for your company. The company has employees who work remotely by using a virtual private network (VPN) connection from their computers, which run Windows 8 Pro. These employees use an application to access the company intranet database servers. The company recently decided to distribute the latest version of the application through using a public cloud. Some users report that every time they try to download the application by using Internet Explorer, they receive a warning message that indicates the application could harm their computer. You need to recommend a solution that prevents this warning message from appearing, without compromising the security protection of the computers. What should you do?

A. Publish the application through a public file transfer protocol (FTP) site. B. Digitally sign the application by using a trusted certificate, and then update the default App Package Deployment policy on all computers. C. Change the default Software Restriction Policies on the client computers. D. Change the default Applications Control Policies on the client computers.

Answer: B Explanation: Note: The app package signature ensures that the package and contents haven’t been modified after they were signed. If the signing certificate validates to a Trusted Root Certification Authorities Certificate, the signature also identifies who signed the package.

QUESTION 109 Hotspot Questions You install Windows 8 Pro on a new client computer. You sign-in to the computer by using a domain user account. You need to synchronize the Personalize settings between your domain account and a Microsoft account. What should you configure first? (To answer, select the appropriate settings section in the answer area.) Answer:

QUESTION 110 Hotspot Questions Your network contains an Active Directory domain. All client computers run Windows 8 Enterprise and are located in an organizational unit (OU) named Windows8Computers. The network has Windows Server update Services (WSUS) installed. All of the computers are configured to receive updates from WSUS. The network administrator creates a new computer group named Win8Computers in WSUS. You need to ensure that the Windows 8 computers receive all of the updates that are assigned to the WinSComputers computer group. Which Group Policy setting should you configure? (To answer, select the appropriate setting in the answer area.)

QUESTION 161 You have a computer that runs Windows 8.1. IPv6 is disabled on the computer. The computer has the following IPv4 settings: – IP address: 10.1.1.193 – Subnet mask: 255.255.0.0 – Default gateway: 10.1.1.194 – Preferred DNS server: 10.1.1.195 You need to ensure that the computer can only communicate with computers on the local subnet. What should you do?

QUESTION 163 You have a computer named Computer1 that runs Windows 8.1. You have a server named Server1 that runs Windows Server 2008. Computer1 and Server1 have IPv4 and IPv6 installed. You need to identify whether you can connect to Server1 by using IPv6. What should you do?

QUESTION 164 A company is setting up a new branch office. You deploy 10 new Windows 8.1 64-bit client computers in the branch office. The computers cannot connect to the Internet. You run the ipconfig command on one computer. The following output depicts a portion of the results.

You need to ensure that the computers can connect to the Internet. What should you do?

A. Deploy a Dynamic Host Configuration Protocol (DHCP) server. Configure all computers to use DHCP. B. Deploy an Internet Information Services (IIS) server. Configure all computers to use IIS. C. Deploy a Domain Name System (DNS) server. Configure all computers to use DNS. D. Deploy a Windows Internet Name Service (WINS) server. Configure all computers to use WINS.

Answer: A

QUESTION 165 A company has an Active Directory Domain Services (AD DS) domain. All client computers are joined to the domain and run Window 8.1. You set up a management computer named COMPUTER1. You plan to administer COMPUTER1 by using Windows Remote Shell (WinRS) from your client computer. You are unable to connect to COMPUTER1 by running the winrs command. You need to ensure that you can manage only COMPUTER1 by using WinRS. What should you do?

A. Run the winrs netdom join command on all client computers. B. Run the winrs netdom join command only on COMPUTER1. C. Run the winrm quickconfig command on all client computers. D. Run the winrm quickconfig command only on COMPUTER1. E. Run the winrs /ad /u:administrator command on COMPUTER1.

Answer: D

QUESTION 166 You administer Windows 8.1 client computers in your company network. A user reports that her Internet connection is slower than usual. You need to identify the Process Identifiers (PIDs) of applications that are making connections to the Internet. Which command should you run?

QUESTION 167 You administer Windows 8.1 computers in your company network. You need to configure remote computers to receive Windows Remote Shell commands. Which cmdlet should you run on the remote computers?

Answer: A Explanation: The Enable-PSRemoting cmdlet configures the computer to receive Windows PowerShell remote commands that are sent by using the WS-Management technology.

QUESTION 168 You administer Windows 8.1 Pro computers in your company network. A user reports that her computer experiences frequent STOP errors. You need to repair the Windows 8.1 installation. Your solution must ensure that the user retains her current documents and settings. What should you do?

QUESTION 169 You administer a Windows 8.1 Pro client computer. You disable system protection, install custom drivers, and create a system image. You test a new application and discover that the computer becomes unresponsive. You need to return your computer to the state that existed prior to the installation of the application. What should you do?

A. Start the computer from a system recovery drive, and then perform System Restore. B. Start the computer from a system repair disk, and then perform System Image Recovery. C. Start the computer from the system repair disk, and then from the command prompt, run the BCDEdit /copy command. D. Run Reset your PC.

Answer: B Explanation: If you can’t access Control Panel and you don’t have a Windows installation disc or a system repair disc, use this method to restore your computer: Restart your computer using the computer’s power button. Do one of the following: On the Advanced Boot Options screen, use the arrow keys to highlight Repair your computer, and then press Enter. Select a keyboard layout, and then click Next. Select a user name, type the password, and then click OK. On the System Recovery Options menu, click System Image Recovery, and then follow the instructions.

QUESTION 170 A company has Windows 8.1 client computers. Users store data files in their user profile libraries. You need to ensure that you can restore data files to any date while minimizing system overhead. Which two actions should you perform? (Each answer presents part of the solution. Choose two.)

QUESTION 151 Your network consists of a single IPv4 subnet. The subnet contains 20 computers that run Windows 8.1. You add a new computer named Computer1 to the subnet. You discover that Computer1 has an IP address of 169.254.34.12. You cannot connect to other computers on the network. Other computers on the network can connect to each other. You need to ensure that you can connect to all computers on the network. What should you do?

QUESTION 153 You have a computer that runs Windows XP and a USB drive that is protected by using BitLocker To Go. You need to ensure that you can copy files from the computer to the USB drive. The solution must retain the existing files on the USB drive. What should you do?

A. From a computer that runs Windows 8.1, change the file system of the USB drive. B. From a computer that runs Windows 81., disable BitLocker To Go for the USB drive. C. Log on to Windows XP as member of the Administrators group. D. Log on to Windows XP by using a user account that has an Encrypting File System (EFS) certificate.

Answer: B

QUESTION 154 Your company network has a single-domain Active Directory forest. The forest functional level is set to Windows Server 2008 R2. All computers are members of the domain. You plan to deploy Windows BitLocker Drive Encryption (BitLocker) on portable computers that have Windows 8.1 installed. You need to be able to automatically back up recovery passwords for BitLocker-protected disk volumes on the portable computers. What should you do before you start encrypting the disk volumes with BitLocker?

A. Run the cscript Add-TPMSelfWriteACE.vbs script on the portable computers. B. Run the cscript List-ACEs.vbs script on the portable computers. C. Run the cscript Get-TPMOwnerInfo.vbs script on the client computers. D. Select the Turn on Bitlocker backup to Active Directory option in local policy on the portable computers.

Answer: D

QUESTION 155 A user reports that he is unable to start his computer. He provides the following information: – The boot partition is encrypted by using BitLocker Drive Encryption (BitLocker). – The user cannot locate his BitLocker recovery key. You need to start Windows 8.1 on the computer. The solution must use the minimum amount of administrative effort. What should you do?

QUESTION 156 You have 100 computers that run Windows XP. Each computer has the following features: – Contains a single hard disk drive. – Contains a single partition. – Supports USB devices during startup. You are planning a clean installation of Windows 8.1. You need to ensure that the installation of Windows 8.1 will support BitLocker Drive Encryption on the system partition. What should you do?

A. Perform a clean installation of Windows 8.1 by using the existing partition. Verify the status of the partition by using manage-bde.exe. B. Verify that the computers have Trusted Platform Modules (TPM) version 1.2 security devices. C. Perform a clean installation of Windows 8.1 by using the existing partition. Encrypt a USB drive by using the BitLocker-to-Go-Feature. D. Perform a clean installation of Windows 8.1 by using the existing partition. Use bdehdcfg.exe to configure the partition.

Answer: D

QUESTION 157 You have a computer that runs Windows 8.1. Multiple users log on to the computer. You need to deny one user access to removable devices on the computer. All other users must have access to the removable drives. What should you do?

A. From the local Group Policy, modify an application control policy. B. From Control Panel, modify the BitLocker Drive Encryption settings. C. From Device Manager, modify the settings of all removable devices. D. From the local Group Policy, modify a removable storage access policy.

Answer: D

QUESTION 158 You have a computer that runs Windows 8.1. You need to configure an application to connect to the computer by using the IPV6 loopback address. Which address should you specify?

A. ::1 B. 12::1 C. 127.0.0.1 D. fe80::f56f:56cb:a136:4184

Answer: A

QUESTION 159 Your network consists of a single Active Directory domain named contoso.com. You have a server named Server1 that runs a custom network application. Server1 has the following IP addresses: – 192.168.15.10 – 192.168.15.11 You need to ensure that a client computer resolves server1.contoso.com to only the 192.168.15.11 IP address. What should you do from the computer?

QUESTION 160 You have two computers on the same subnet. The computers have the IPv6 addresses shown in the following table: You need to test the connection to the IPv6 address from Computer1 to Computer2. Which command should you run?

QUESTION 141 A company has client computers that run Windows 8 in a kiosk environment. You need to ensure that Windows updates are automatically applied and cannot be disabled by users. What should you do?

A. Configure Windows Update to install updates automatically. B. In the local Group Policy, enable the Turn on recommended updates via Automatic Updates policy setting. C. msiexec /i app1.msi /qn D. In the local Group Policy, configure the Remove access to use all Windows Update features policy setting.

Answer: D Explanation: http://technet.microsoft.com/en-us/library/cc775792%28v=ws.10%29.aspxTurn off access to all Windows Update features: This Group Policy setting is located in Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings. When you enable this setting, the operating system cannot be updated through Windows Update, and Automatic Updates is disabled. Users or administrators can still perform actions such as clicking the Windows Update option on the Start menu, and the Windows Update Web site will appear in the browser. However, it will not be possible to update the operating system through Windows Update, regardless of the type of account being used to log on. I think that is exactly what we want to happen in a kiosk environment. Kiosk Computers will still be able to receive their updates from a WSUS server.

QUESTION 142 You administer client computers in your company network. The network includes an Active Directory Domain Services (AD DS) domain. Employees in the human resources (HR) department are getting new Windows 8 Enterprise computers. The HR department uses a line of business (LOB) Windows Store app named Timesheet that is not available in Windows Store. You need to ensure that all employees in the HR department can use Timesheet on their new computers. What should you do?

A. Use a Microsoft account to log on to each computer. B. Use a local account to log on to each computer. C. Activate the sideloading product key on each computer. D. Install and run the Windows App Certification Kit.

Answer: C

QUESTION 143 You use a Windows 8 Pro computer. The computer stores research data in a folder named C:\Research. You turn on File History. You need to back up the Research folder. What should you do?

A. Create a new library and include the folder in the library. B. Create a new volume mount point in the root of the folder. C. Create a new storage space and move the folder to the storage space. D. Create a new restore point.

Answer: C

QUESTION 144 Drag and Drop Questions A company plans to upgrade its client computer operating systems from Windows 7 to Windows 8. You need to use the User State Migration Tool (USMT) to configure the migration profile to exclude all files in the users’ Documents folders. Which command should you run on the client computers before the upgrade? (To answer, drag the appropriate command elements to the correct location or locations in the answer area. Each command may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 145 You administer Windows 8 client computers in your company network. A guest at your company is connected to the Internet as shown in the following exhibit. (Click the Exhibit button.) You need to ensure that the guest user is able to share network resources over Wi-Fi without lowering the overall security of the computer. What should you do?

QUESTION 146 Hotspot Questions You administer Windows 8 computers in your company network. All computers include Windows 8 compatible Trusted Platform Module (TPM). You configure a computer that will run a credit card processing application. You need to ensure that the computer requires a user to enter a PIN code when starting the computer. Which policy should you configure? (To answer, select the appropriate policy in the answer area.) Answer:

QUESTION 147 A company has client computers that run Windows 8. When a user tries to print from his portable client computer while connected to the corporate network, he discovers that the default printer is set to his home printer instead of to the office printer. You need to ensure that the default printer for the computer is the office printer when the computer is connected to the corporate network and the user’s home printer when the computer is connected to his home network. What should you do on the portable computer?

A. In the printer properties of the corporate printer, configure the active port with the correct TCP/IP settings for the printer. B. Install the corporate printer and set it as the default printer. Then add the home printer to the homegroup settings. C. Connect to the home network and choose Connect from the shared printer object context menu. Then connect to the corporate network and choose Connect from the shared printer object context menu. D. Set a default printer for each network.

Answer: D

QUESTION 148 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. You need to configure 20 portable computers so that they sleep after 20 minutes when running on battery power. You must accomplish this goal by using the least amount of administrative effort. Which two actions should you perform? (Each correct answer presents part of the complete solution. Choose two.)

A. Edit the local Group Policy to configure the Shut Down options. B. Create a Group Policy object (GPO) that configures the Sleep Management settings. C. Create a Group Policy object (GPO) that configures the Power Management settings. D. Link the Group Policy object (GPO) to the organizational unit containing the portable computers. E. Edit the local Group Policy to configure the Power Management settings.

Answer: CD Explanation: Put the Laptops into an OU. Create an appropriate GPO. Link the GPO to the OU. Note: * Networking power management (not sleep management) refers to the set of features that you can configure to allow the computers in your network to save energy. Incorrect: Local Group Policy would have to be edited locally on each laptop.

QUESTION 149 You install Windows 8 on a client computer. Several days later, you establish that the computer has been infected by malware. You are unable to establish when the computer was infected. You need to restore the client computer to full functionality. What should you do?

A. Start the computer using the Last Known Good Configuration option. B. Use the Refresh your PC without affecting your files function. C. Start the computer in Safe Mode. D. Use the Remove everything and install Windows function.

Answer: D

QUESTION 150 A company has client computers that run Windows 8. Each employee has one client computer at the office. Some employees also have personal computers at home. The company has applications that run only on Windows 8. You need to deploy Windows To Go so that employees can run the applications on their home computers. Which two command-line tools should you use? (Each correct answer presents part of the solution. Choose two.)

A. bcdedit B. DISM C. bcdboot D. ImageX

Answer: BC Explanation: See step 12 and 13 below. Create Windows To Go on any edition of Windows 8: 1. Launch an administrative level command prompt. 2. Make sure that your USB Drive is plugged in and then type in diskpart and hit Enter. 3. List the available disks by running “list disk” and you should see your usb device. 4. Select your USB drive by typing “select disk #” and hit Enter. For example, “select disk 3”. 5. Clean the partitions on the disk by typing “clean” and hit Enter. 6. Now create the boot partition by running the following command: create partition primary size=350 7. Now create the OS partition by running the following command to create a partition taking up all remaining space: create partition primary 8. The boot partition needs to be formatted, configured and assigned a drive letter, run the following commands: select partition 1 format fs=fat32 quick active assign letter=b (if the b drive letter is already in use on your PC, substitute a different letter and replace b with your letter throughout the rest of this guide) 9. The same must be done for the OS partition, run the following different commands: select partition 2 format fs=ntfs quick assign letter=o (if the o drive letter is already in use on your PC, substitute a different letter and replace o with your letter throughout the rest of this guide) 10. Exit Diskpart by typing Exit. 11. Extract the install.wim file from the \sources\ directory of the Windows 8 install ISO to c:\wim\. On Windows 8 you can just double click an ISO to mount and then browse it. 12. Use DISM to deploy the Windows 8 files to the OS partition of the USB device by running: dism /apply-image /imagefile:c:\wim\install.wim /index:1 /applydir:o:\ 13. The boot manager needs to be installed on the boot partition with the help of the bcdboot utility. Run the following command: o:\windows\system32\bcdboot o:\windows /f ALL /s b: 14. Reboot your computer and test your new Windows 8 To Go device built on Windows 8. Make sure the PC is configured to boot to USB before your local hard drive. Reference: How to Create a Windows To Go USB Drive.

QUESTION 131 Hotspot Question You administer Windows 8 Enterprise (64-bit) computers in your company network. For some applications, some computers run a 32-bit version of the application, and other computers run a 64- bit version of the application. You want to distribute a package that contains updates for the 32-bit applications only. You need to determine if a particular computer is running 32-bit or 64-bit versions of the applications. From the Select columns window, which column should you add to Task Manager? (To answer, select the appropriate column name in the answer area.) Answer:

QUESTION 132 A company has client computers that run Windows XP or Windows Vista. The company plans to upgrade all client computers to Windows 8. You are planning a deployment strategy. You need to identify the elements that will be retained after the upgrades. Which elements will be retained? (To answer, drag the appropriate element or elements to the correct location or locations in the answer area. Elements may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 133 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. The company has three departments named Accounting, Human Resources (HR), and Marketing. User account objects are stored in their respective departmental AD security groups and have full access to shared folders for each department. A new company policy requires that the following access rules are in place: – Users must have complete access only to their department’s shared folder. – Accounting department users must be able to change files in the HR folder. – HR department users must be able to change files in the Marketing folder. – Marketing department users must be able to change files in the Accounting folder. You need to comply with the company policy. Which permissions should you assign? (To answer, drag the appropriate security group or groups to the correct location or locations in the answer area. Security groups may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 134 You are troubleshooting communication issues on a computer that has Windows 8 Enterprise installed. The relevant portion of the computer configuration is displayed in the exhibit. (Click the Exhibit button.) You need to find the Windows Firewall service startup and shutdown events. In the Event Viewer, which event log should you select? (To answer, select the appropriate log in the answer area.) Answer:

QUESTION 135 You are preparing to deploy a new computer that runs Windows 8. You plan to copy the user’s data from his current computer to the new computer. You need to generate a list of data that will be copied from his existing computer to the new computer. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer:

QUESTION 136 A local printer named PRINTER1 is shared from a client computer named COMPUTER1 that run a 32-bit version of Windows 8. A workgroup contains client computers that run a 64-bit version of Windows 8. Computers in the workgroup can’t currently print to PRINTER1. You need to ensure that the workgroup computers can print to PRINTER1. Which three actions should you perform in sequence? (To answer, move the appropriate actions to the answer area and arrange them in the correct order.) Answer:

QUESTION 137 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. Two computers named COMPUTER1 and COMPUTER2 are connected to one network switch and joined to the domain. Windows Firewall is turned off on both computers. You are planning a remote management solution. You have the following requirements: Ensure that COMPUTER1 can run remote commands on COMPUTER2. Test the solution by successfully running a command from COMPUTER1 that executes on COMPUTER2. You need to select the commands to run on COMPUTER1 and COMPUTER2 to meet the remote management requirements. Which commands should you run? (To answer, drag the appropriate command or commands to the correct location or locations in the answer area. Commands may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer: Explanation: http://technet.microsoft.com/en-us/library/dd163506.aspx

QUESTION 138 A company has client computers that run Windows 8. All client computers allow incoming Remote Desktop connections. You attempt to connect from COMPUTER1 to COMPUTER2 by using Remote Desktop. Remote Desktop cannot connect to the remote computer. You establish that the firewall settings on COMPUTER2 have not been set to allow incoming connections. From COMPUTER1, you need to enable Remote Desktop traffic through Windows Firewall on COMPUTER2. Which commands should you run? (To answer, drag the appropriate command or commands to the correct location or locations in the answer area. Commands may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer: Explanation: http://docs.oseems.com/operatingsystem/windows/firewall-command

QUESTION 139 A desktop computer runs Windows 8. The computer is joined to an Active Directory Domain Services (AD DS) domain named contoso.com. You have two domain user accounts: – A primary account named User1 that does not have domain administrative privileges. – An account named Admin1 that has administrative privileges in the domain. You are currently logged in as User1. You need to run an application named appl.exe. You have the following requirements: Start the application by using your administrative credentials. Ensure that the user environment is fully available to the application. You need to complete the command to meet the requirements. Which command segments should you use to complete the command? (To answer, drag the appropriate command segments to the correct locations in the answer area. Command segments may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 140 A company has a branch office with client computers that run Windows 8. Files are saved locally on the client computers and are not backed up regularly. You need to ensure that you can retrieve previous versions of locally saved files from each client computer. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Explanation: http://blogs.msdn.com/b/b8/archive/2012/07/10/protecting-user-files-with-file-history.aspx

QUESTION 121 A client laptop runs Windows 7 Professional and a custom application. The custom application is compatible with Windows 8. You plan to migrate user settings and data from the client laptop to a new tablet PC that runs Windows 8 Pro. You install the User State Migration Toolkit (USMT) on a USB flash drive. You need to ensure that the custom application settings are applied to the tablet PC after the migration is complete. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Explanation: http://www.utilizewindows.com/7/basics/170-migrate-to-windows-7-using-usmt

QUESTION 122 You have a computer that runs Windows 8, and three unused external disk drives. You are creating a volume to store picture files. You have the following requirements: – Use all three external disk drives. – Ensure that the volume is accessible from a single drive letter. – Ensure data redundancy between the disk drives in the event of a hardware failure. You need to create the volume. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Explanation: http://www.eightforums.com/tutorials/4203-storage-spaces-create-new-pool-storage-space- windows-8- a.html

QUESTION 123 A desktop computer runs Windows 8. The computer is joined to an Active Directory Domain Services (AD DS) domain named contoso.com. You have two domain user accounts: – A primary account named User1 that does not have domain administrative privileges. – An account named Admin1 that has administrative privileges in the domain.

You are currently logged in as User1. You need to run an application named appl.exe. You have the following requirements: Start the application by using your administrative credentials. Minimize the application load time. You need to complete the command to meet the requirements. Which command segments should you use to complete the command? (To answer, drag the appropriate command segments to the correct locations in the answer area. Command segments may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 124 A local printer named PRINTER1 is shared from a client computer named COMPUTER1 that run a 64-bit version of Windows 8. The workgroup contains client computers that run a 32-bit version of Windows 8. Computers in the workgroup can’t currently print to PRINTER1. You need to ensure that the workgroup computers can print to PRINTER1. Which three actions should you perform in sequence? (To answer, move the appropriate actions to the answer area and arrange the correct order.) Answer: Explanation: http://technet.microsoft.com/library/cc732946.aspx

QUESTION 125 You have a computer that runs Windows 8, and three unused external disk drives. You are creating a volume to store picture files. You have the following requirements: • Use all three external disk drives. • Ensure that the volume is accessible from a single drive letter. • Maximize the available space. You need to create the volume. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Explanation: Disk Management tool does not have a setting for disk resiliency. In Storage Pool select “Simple” (no resiliency): A simple storage space writes one copy of your data, and doesn’t protect you from drive failures. A simple storage space requires at least one drive.

QUESTION 126 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. Some computers have a Trusted Platform Module (TPM) chip. Members of the ITStaff security group are part of the local Power Users group on each client computer. You need to configure a single Group Policy object (GPO) that will allow Windows BitLocker Drive Encryption on all client computers by using the least amount of privilege necessary. Which commands should you run? (To answer, drag the appropriate command or commands to the correct location or locations in the answer area. Commands may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer: Explanation: http://technet.microsoft.com/en-us/library/ee706521(v=ws.10).aspx

QUESTION 127 A Company has 10 computers that run windows vista. The computers are members of a workgroup The company plans to upgrade the computers to windows 8. You are planning a deployment strategy. You need to ensure that users can log on to their existing accounts and access their existing data after the upgrade. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer:

QUESTION 128 Drag and Drop Question You administer Windows 8 Pro computers in your company network. A user informs you that he wants to use a picture password on his computer. You need to configure a picture password with a custom picture for the user. Which prerequisites should you comply with for each element in order to configure the required picture password? (To answer, drag the appropriate prerequisite or prerequisites to the correct element or elements in the answer area. Each prerequisite may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 129 Drag and Drop Question You administer Windows 8 Pro computers in your company network. A user informs you that he wants to use a picture password on his computer. You need to configure a picture password with a custom picture for the user. Which prerequisites should you comply with for each element in order to configure the required picture password? (To answer, drag the appropriate prerequisite or prerequisites to the correct element or elements in the answer area. Each prerequisite may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 130 Hotspot Question You install Windows 8 Enterprise on new laptops that will be shipped to remote users in the sales department of your company. You create new VPN connections on the laptops. Your company security policy requires that the maximum allowed network outage time for the VPN connection should be less than 10 minutes. You need to configure the required timeout. Which protocol should you use? (To answer, configure the appropriate option or options in the answer area.) Answer: Passing Microsoft 70-687 Exam successfully in a short time! Just using Braindump2go’s Latest Microsoft 70-687 Dump:http://www.braindump2go.com/70-687.html

QUESTION 111 You administer Windows 8 Enterprise client computers in your company network. You change settings on a reference computer by using the Windows Firewall with Advanced Security tool. You want to apply the same settings to other computers. You need to save the windows Firewall with Advanced Security configuration settings from the reference computer. You also need to be able to import the configuration settings into a Group Policy object later. What should you do?

A. Open Local Group Policy Editor, select the Local Policies node, and then select the Export List action. B. Open Local Group Policy Editor, select the Security Settings node, and then select the Export List action. C. Run the netsh advfirewall export c:\settings.wfw command. D. Run the netsh advfirewall export c:\settings.xml command.

Answer: C Explanation: *Netsh advfirewall is a command-line tool for Windows Firewall with Advanced Security that helps with the creation, administration, and monitoring of Windows Firewall and IPsec settings and provides an alternative to console-based management. T * Export subcommand Exports the Windows Firewall with Advanced Security configuration in the current store to a file. This file can be used with the import command to restore the Windows Firewall with Advanced Security service configuration to a store on the same or to a different computer. Syntax export [ Path ] FileName Parameters [ Path ] FileName Required. Specifies, by name, the file where the Windows Firewall with Advanced Security configuration will be written. If the path, file name, or both contain spaces, quotation marks must be used. If you do not specify Path then the command places the file in your current folder. The recommended file name extension is .wfw. Example In the following example, the command exports the complete Windows Firewall with Advanced Security service configuration to the file C:\temp\wfas.wfw. export c:\temp\wfas.wfw Reference:Netsh Commands for Windows Firewall with Advanced Security

QUESTION 112 An organization has client computers that run Windows 7. You install the Windows Assessment and Deployment Kit (ADK) in the environment. You capture user settings and data files to a network share, and then perform a clean installation of Windows 8 on the client computers. You need to apply the user profiles from the Windows 7 installation to the Windows 8 installation. What should you do?

A. Run the Ioadstate command. B. Copy the Default Profile to a folder on drive C. C. Run the scanstate command. D. Run Windows Easy Transfer and select the user profile to migrate. E. Run the ImageX command

Answer: A

QUESTION 113 An organization has client computers that run Windows 7. You upgrade the client computers to Windows 8 without migrating the local user profiles. You install the Windows Assessment and Deployment Kit (ADK) in the environment. You need to migrate the user profiles from the Windows 7 installation to the Windows 8 installation. What should you do first on each client computer?

A. Run the scanstate command. B. Run Windows Easy Transfer and select the user profile to migrate C. Run the Ioadstate command. D. Copy the Default Profile to a folder on drive C. E. Run the ImaqeX command.

QUESTION 114 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 7. You plan to upgrade the client computers to Windows 8 Pro. You need to choose the methods that do not require the manual entry of a product key during the upgrade. Which two methods should you choose? (Each correct answer presents a complete solution. Choose two.)

A. Use the Windows 8 online upgrade tool. B. Use Group Policy to assign the Windows 8 installation file to the client computers. C. Use the Microsoft Deployment Toolkit. D. Extract the contents of the Windows 8 .iso image file to a new shared folder and run the setup program from that folder.

Answer: CD

QUESTION 115 A company has 50 client computers that run Windows 8. Forty client computers are connected to a secure internal network, and 10 client computers are located in public kiosks. A new company security policy includes the following requirements: Visitors can access only kiosk computers. Employees can access and shut down only internal computers. Only administrators can access all computers remotely. Only administrators can shut down kiosk computers. You need to assign security groups to local security policies to meet the requirements. What should you do? (To answer, drag the appropriate security group or groups to the correct location or locations in the answer area. Security groups may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 116 A company has an Active Directory Domain Services (AD DS) domain. All client computers run Windows 8. Two computers named COMPUTER1 and COMPUTER2 are connected to one network switch and joined to the domain. Windows Firewall is turned off on both computers. You are planning a remote management solution. You have the following requirements: – Ensure that COMPUTER2 can run remote commands on COMPUTER1. – Test the solution by successfully running a command from COMPUTER2 that executes on COMPUTER1. You need to select the commands to run on COMPUTER1 and COMPUTER2 to meet the remote management requirements. Which commands should you run? (To answer, drag the appropriate command or commands to the correct location or locations in the answer area. Commands may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.) Answer:

QUESTION 117 A company has a main office located in Miami, and brach offices in Boston, Los Angeles and Portland. the Office Networks are configured as described in the following table. A management computer in the main office, named COMPUTER1, runs windows 8 and several third-party management applications. – Ensure that only users in the Boston office can connect to COMPUTER1 by using http. – Ensure that only users in the Los Angeles office can connect COMPUTER1 by using https – Ensure that only users in th Portland office can connect to COMPUTER1 by using FTP. You are configuring access to COMPUTER1. How should you configure windows firewall? (To answer, drag the appropriate elements to the correct location or locations in the answer area. Elements may be used once, more than once, or not at all. You ma need to drag the split bar between panes or scroll.) Answer: Explanation: Seems to be TCP on every answer. http://en.wikipedia.org/wiki/List_of_TCP_and_UDP_port_numbers

QUESTION 118 A computer currently runs a 32-bit version of Windows 7 Ultimate. You need to deploy a 64- bit version of Windows 8 to the computer. The new deployment must be the only version of Windows on the computer. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer:

QUESTION 119 Ten client computers run Windows Vista and a custom application. The custom application is compatible with Windows 8. You purchase 10 new computers that have Windows 8 pre- installed. You plan to migrate user settings and data from the Windows Vista computers to the Windows 8 computers. You install the User State Migration Toolkit (USMT) on a USB flash drive. You need to ensure that the custom application settings are applied to the Windows 8 computers after the migration is complete. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer:

QUESTION 120 A computer currently runs a 64-bit version of Windows 7 Enterprise. You need to deploy a 64-bit version of Windows 8 Pro to the computer. The new deployment must not affect the Windows 7 installation on the computer. Which three actions should you perform in sequence? (To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.) Answer: Explanation: http://lifehacker.com/5840387/how-to-dual+boot-windows-7-and-windows-8-side-by-side

QUESTION 81 Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012. All client computers run Windows 8. The domain contains a Remote Desktop Services (RDS) infrastructure and a Microsoft Application Visualization (App-V) infrastructure. Domain users use version 1.0 of a third-party application named Appl. Version 2.0 of App1 is released. Version 1.0 and version 2.0 cannot be installed on the same client computer. You need to recommend a solution to ensure that the users can run both versions of App1 simultaneously. The solution must meet the following requirements: – Provide users with the ability to run App1 while they are disconnected from the corporate network. – Minimize the amount of disk space required. What should you include in the recommendation?

A. Use App-V to sequence and publish version 2.0 of Appl. B. Publish version 2.0 of App1 as a RemoteApp program. C. Create a shim for version 2.0 of App1 by using the Microsoft Application Compatibility Toolkit (ACT). D. Deploy version 2.0 of App1 on a virtual machine on the client computers.

Answer: A

QUESTION 82 Your network contains an Active Directory domain named contoso.com. All client computers run Windows 8 Enterprise. You plan to deploy Hyper-V to the client computers. You need to identify which hardware features the client computers must support to enable the Client Hyper-V feature. What should you identify? (Each correct answer presents part of the solution. Choose all that apply.)

QUESTION 83 You plan to deploy virtual desktops to the network. All of the virtual desktops will be based on a virtual machine template named Templatel.vhd. Templatel.vhd contains an application named Appl. You plan to deploy an update to App1 named Applupdate.msp. You need to recommend the appropriate deployment method to apply Applupdate.msp to Templatel.vhd. You want to achieve this goal by using the minimum amount of administrative effort. Which deployment method should you recommend?

A. Run dism.exe and specify the /mount-w\rr\ parameter and the /add-package parameter. B. Start a virtual machine that uses Templatel.vhd. Install Applupdate.msp, and then generalize the virtual machine, C. Mount Templatel.vhd, and then copy Applupdate.msp to the %Systemroot%\AppPatch folder. D. Run diskpart.exe and specify the attach parameter. Run msiexec.exe and specify the /update parameter.

Answer: B

QUESTION 84 Your network contains multiple servers that run Windows Server 2012. The network contains a Windows Server Update Services (WSUS) infrastructure. On a server named Server1, you create and deploy images by using Microsoft Deployment Toolkit (MDT) 2012. You need to recommend a solution to ensure that the available updates are applied during the deployment of the image. What should you do?

A. From the WSUS Administration console, configure the personalization settings, and then create a computer group. B. From Server1, edit the task sequence, and then modify the Customsettings.ini file. C. From the WSUS Administration console, configure the personalization settings, and then configure the classifications. D. From Server1, edit the task sequence, and then modify the Bootstrap.ini file.

Answer: B

QUESTION 85 Your network contains an Active Directory domain named contoso.com. You use a Group Policy object (GPO) named GP01 to deploy applications to the domain users. You need to create software categories that will be used to group the applications that are displayed in Programs and Features. Which setting in GPO1 should you configure? To answer, select the appropriate node in Group Policy Management Editor in the answer area. Answer:

QUESTION 86 Your network contains two servers named Server1 and Server2 that run Windows Server 2012. You need to install the Remote Desktop Services server role on Server2 remotely from Server1. Which tool should you use?

QUESTION 87 Your network contains a file server named Server1 that runs Windows Server 2012. All client computers run Windows 8. Server1 contains a folder named Folder1. Folder1 contains the installation files for the company’s desktop applications. A network technician shares Folder1 as Share 1. You need to ensure that the share for Folder1 is not visible when users browse the network. What should you do?

A. From the properties of Folder1, deny the List Folder Contents permission for the Everyone group. B. From the properties of Folder1, remove Share1, and then share Folder1 as Share1$. C. From the properties of Folder1, configure the hidden attribute. D. From the properties of Share1, configure access-based enumeration

Answer: B

QUESTION 88 You work as an administrator at L2P.com. The L2P.com network consists of a single domain named L2P.com. All servers in the L2P.com domain, including domain controllers, have Windows Server 2012 installed. You have been instructed to add a new domain controller to L2P.com’s existing environment. Which of the following actions should you take?

A. You should consider making use of Server Manager. B. You should consider making use of Authorization Manager. C. You should consider making use of Remote Desktop Gateway Manager. D. You should consider making use of Network Load Balancing Manager.

Answer: A

QUESTION 89 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 has the Hyper- V server role installed. Server1 has a virtual switch named RDS Virtual. You replace all of the network adapters on Server1 with new network adapters that support single-root I/O virtualization (SR-IOV). You need to enable SR-IOV for all of the virtual machines on Server1. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. On each virtual machine, modify the Advanced Features settings of the network adapter. B. Modify the settings of the RDS Virtual virtual switch. C. On each virtual machine, modify the BIOS settings. D. Delete, and then recreate the RDS Virtual virtual switch. E. On each virtual machine, modify the Hardware Acceleration settings of the network adapter.

Answer: DE

QUESTION 90 Your network contains an Active Directory domain named contoso.com. The domain contains a main office and a branch office. An Active Directory site exists for each office. The domain contains two servers named Server1 and Server2 that run Windows Server 2012. Both servers have the DHCP Server server role installed. Server1 is located in the main office site. Server2 is located in the branch office site. Server1 provides IPv4 addresses to the client computers in the main office site. Server2 provides IPv4 addresses to the client computers in the branch office site. You need to ensure that if either Server1 or Server2 are offline, the client computers can still obtain IPv4 addresses. The solution must meet the following requirements: – The storage location of the DHCP databases must not be a single point of failure. – Server1 must provide IPv4 addresses to the client computers in the branch office site only if Server2 is offline. – Server2 must provide IPv4 addresses to the client computers in the main office site only if Server1 is offline. Which configuration should you use?

QUESTION 71 Your network contains a Virtual Desktop Infrastructure (VDI). All users access applications by using their virtual desktop. All virtual desktops run Windows 8. You have a test environment that contains four computers. The computers are configured as shown in the following table. You plan to sequence 15 applications that will be deployed to the virtual desktops. You need to identify which computers must be used to run the App-V Sequencer. Which computer should you identify? More than one answer choice may achieve the goal. Select the BEST answer.

A. Server1 B. Client1 C. Server2 D. Client2

Answer: D

QUESTION 72 Your network contains an Active Directory domain named contoso.com. The domain contains five servers. The servers are configured as shown in the following table. Servers Microsoft Application Virtualization (App-V) management server You plan to deploy three App-V applications named App1, App2, and App3 by using RemoteApp publishing. Users will access App1, App2, and App3 from the RD Web Access site. You need to ensure that the users can run App1, App2, and App3 by clicking links to the applications from the RD Web Access site. On which server should you install the App-V client?

A. Server1 B. Server2 C. Server3 D. Server4 E. Server5

Answer: A

QUESTION 73 Your network contains an Active Directory domain named contoso.com. You deploy Remote Desktop Services (RDS) and publish multiple RemoteApp programs. You need to ensure that users can subscribe to the RemoteApp and Desktop Connections feed by using their email address. Which resource record type should you add to the DNS zone? To answer, select the appropriate resource record type in the answer area. Answer:

QUESTION 74 Your network contains an Active Directory domain named contoso.com. Your company plans to deploy a Remote Desktop Services (RDS) infrastructure that will contain six Remote Desktop Session Host (RD Session Host) servers and three applications. The servers will be configured as shown in the following table. You need to identify how many session collections will be required to publish the applications on the RD Session Host servers. How many session collections should you identify?

A. 1 B. 2 C. 3 D. 4

Answer: D

QUESTION 75 Your network contains an Active Directory domain named contoso.com. You deploy Remote Desktop Services (RDS) to four servers. The servers are configured as shown in the following table. You create a session collection named Collection1 that contains Server1 and Server2. Collection1 will use user profile disks stored in a share named Share1. Two users named User1 and User2 are members of a group named Group2. User1 and User2 will use RDS. You need to identify which security principal must have full permissions to Share1. Which security principal should you identify? To answer, select the appropriate object in the answer area. Answer:

QUESTION 76 Your network contains an Active Directory domain named contoso.com. The domain has Remote Desktop Services (RDS) deployed. A technician publishes 10 line-of-business applications and 10 productivity applications as RemoteApp programs. You need to ensure that the RemoteApp programs are organized in two separate categories on the Remote Desktop Web Access (RD Web Access) site. What should you modify?

A. The Web.config file of the RD Web Access site B. The Directory Browsing settings of the RD Web Access site C. The list of RemoteApp program folders in the properties of the RemoteApp programs D. The User Assignment settings of the RemoteApp programs

Answer: C

QUESTION 77 Your company has a main office and 10 branch offices. Each branch office connects to the main office by using a low-bandwidth WAN link. All servers run Windows Server 2012. All client computers run Windows 8. You plan to deploy 20 new line-of-business applications to all of the client computers. You purchase 5,000 client licenses for the line-of-business applications. You need to recommend an application distribution solution. The solution must be able to meet the following requirements: – Download application installation files from a server in the local site. – Generate reports that contain information about the installed applications. – Generate administrative alerts when the number of installed applications exceeds the number of purchased licenses. What should you include in the recommendation? More than one answer choice may achieve the goal. Select the BEST answer.

QUESTION 78 Your company has a main office and two branch offices. The branch offices connect to the main office by using a slow WAN link. You plan to deploy applications to all of the offices by using Microsoft Application Visualization (App-V) 5.0 streaming. You need to recommend the server placement for the planned infrastructure. What should you recommend? More than one answer choice may achieve the goal. Select the BEST answer.

A. In the main office, deploy a management server, a database server, and a publishing server. In the branch offices, deploy a publishing server. B. In the main office, deploy a database server and a publishing server. In the branch offices, deploy a management server, a database server, and a publishing server. C. In the main office, deploy a management server, a database server, and a publishing server. In the branch offices, deploy a database server. D. In each office, deploy a management server, a database server, and a publishing server.

Answer: A

QUESTION 79 Your network contains an Active Directory domain named contoso.com. The domain contains 500 client computers that run Windows 8. You plan to deploy two applications named App1 and App2 to the client computers. App2 is updated by the application manufacturer every month. You need to recommend an application distribution strategy for the applications. The solution must meet the following requirements: The executable files of App1 must NOT be stored on the client computers. Users who run App2 must run the latest version of App2 only. What should you recommend using to deploy the applications?

A. Microsoft Application Virtualization (App-V) in streaming mode B. A Group Policy software distribution package that is published to the user accounts C. Windows XP Mode D. A Group Policy software distribution package that is assigned to the user accounts

Answer: A

QUESTION 80 Your network contains an Active Directory domain named contoso.com. All client computers run Windows 7. You plan to upgrade all of the client computers to Windows 8. You install the Microsoft Application Compatibility Toolkit (ACT) on a server named Server1. You configure Server1 to host the Log Processing Service shared folder, You need to recommend which permissions must be assigned to the Log Processing Service shared folder. The solution must provide the least amount of permissions to the shared folder. Which permissions should you recommend assigning to the Everyone group on the shared folder? (Each correct answer presents part of the solution. Choose all that apply.)

QUESTION 331 Hotspot Question Your network contains two Web servers named Server1 and Server2. Both servers run Windows Server 2012 R2. Server1 and 5erver2 are nodes in a Network Load Balancing (NLB) cluster. The NLB cluster contains an application named App1 that is accessed by using the name appl.contoso.com. The NLB cluster has the port rules configured as shown in the exhibit. (Click the Exhibit button.) To answer, complete each statement according to the information presented in the exhibit. Each correct selection is worth one point. Answer:

QUESTION 332 Hotspot Question Your network contains an Active Directory domain named contoso.com. You install the IP Address Management (IPAM) Server feature on a server named Server1 and select Manual as the provisioning method. The IPAM database is located on a server named SQL1. You need to configure IPAM to use Group Policy Based provisioning. What command should you run first? To answer, select the appropriate options in the answer area. Answer:

QUESTION 333 Your network contains an Active Directory domain named contoso.com. The domain contains an IP Address Management (IPAM) server that uses a Windows Internal Database. You install a Microsoft SQL Server 2012 instance on a new server. You need to migrate the IPAM database to the SQL Server instance. Which cmdlet should you run?

QUESTION 334 Your network contains an Active Directory domain named contoso.com. The domain contains a certification authority (CA). You suspect that a certificate issued to a Web server is compromised. You need to minimize the likelihood that users will trust the compromised certificate. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Stop the Certificate Propagation service. B. Modify the validity period of the Web Server certificate template. C. Run certutil and specify the -revoke parameter. D. Run certutil and specify the -deny parameter. E. Publish the certificate revocation list (CRL).

Answer: CE Explanation: First revoke the certificate, then publish the CRL.

QUESTION 335 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 is an enterprise root certification authority (CA) for contoso.com. You need to ensure that the members of a group named Group1 can request code signing certificates. The certificates must be issued automatically to the members. Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

Answer: AB Explanation: First modify the certificate template in Certificate Templates, then add it in Certification Authority.

QUESTION 336 Hotspot Question Your network contains an Active Directory forest. You implement Dynamic Access Control in the forest. You have the claim types shown in the Claim Types exhibit. (Click the Exhibit button.) The properties of a user named User1 are configured as shown in the User1 exhibit. (Click the Exhibit button.) The output of Whoa mi /claims for a user named User2 is shown in the Whoa mi exhibit. (Click the Exhibit button.) Select Yes if the statement can be shown to be true based on the available information; otherwise select No. Each correct selection is worth one point. Answer:

QUESTION 337 Your network contains an Active Directory domain named contoso.com. All servers run Windows Server 2012 R2. You are creating a central access rule named TestFinance that will be used to grant members of the Authenticated users group access to a folder stored on a Microsoft SharePoint Server 2013 server. You need to ensure that the permissions are granted when the rule is published. What should you do?

A. Set the Permissions to Use the following permissions as proposed permissions. B. Set the Permissions to Use following permissions as current permissions. C. Add a Resource condition to the current permissions entry for the Authenticated Users principal. D. Add a User condition to the current permissions entry for the Authenticated Users principal.

QUESTION 321 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012. Server1 is the enterprise root certification authority (CA) for contoso.com. You need to enable CA role separation on Server1. Which tool should you use?

QUESTION 322 Drag and Drop Question Your network contains an Active Directory domain named contoso.com. The domain contains two servers named Server1 and Server3. The network contains a standalone server named Server2. All servers run Windows Server 2012 R2. The servers are configured as shown in the following table. Server3 hosts an application named Appl. App1 is accessible internally by using the URL https://appl.contoso.com. App1 only supports Integrated Windows authentication. You need to ensure that all users from the Internet are pre-authenticated before they can access Appl. What should you do? To answer, drag the appropriate servers to the correct actions. Each server may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. Answer:

QUESTION 323 You have five servers that run Windows Server 2012 R2. The servers have the Failover Clustering feature installed. You deploy a new cluster named Cluster1. Cluster1 is configured as shown in the following table. Server1, Server2, and Server3 are configured as the preferred owners of the cluster roles. Dynamic quorum management is disabled. You plan to perform hardware maintenance on Server3. You need to ensure that if the WAN link between Site1 and Site2 fails while you are performing maintenance on Server3, the cluster resource will remain available in Site1. What should you do?

QUESTION 324 Hotspot Question You have a server named Server1 that runs Windows Server 2012 R2. Server1 has access to disks that connect to a RAID controller, iSCSI disks, and disks connected to a SCSI controller. You plan to use a tiered storage space on Server1. You need to identify which storage controller and volume type you must use for the tiered storage space. Which storage components should you use? To answer, select the appropriate options in the answer area. Answer:

QUESTION 325 Drag and Drop Question Your network contains an Active Directory domain named adatum.com. The domain contains three servers. The servers are configured as shown in the following table. Server1 is configured as shown in the exhibit. (Click the Exhibit button.) Template1 contains custom cryptography settings that are required by the corporate security team. On Server2, an administrator successfully installs a certificate based on Template1. The administrator reports that Template1 is not listed in the Certificate Enrollment wizard on Server3, even after selecting the Show all templates check box. You need to ensure that you can install a server authentication certificate on Server3. The certificate must comply with the cryptography requirements. Which three actions should you perform in sequence? To answer, move the appropriate three actions from the list of actions to the answer area and arrange them in the correct order. Answer:

QUESTION 326 Your network contains an Active Directory domain named contoso.com. You deploy a server named Server1 that runs Windows Server 2012 R2. A local administrator installs the Active Directory Rights Management Services server role on Server1. You need to ensure that AD RMS clients can discover the AD RMS cluster automatically. What should you do?

A. Run the Active Directory Rights Management Services console by using an account that is a member of the Schema Admins group, and then configure the proxy settings. B. Run the Active Directory Rights Management Services console by using an account that is a member of the Schema Admins group, and then register the Service Connection Point (SCP). C. Run the Active Directory Rights Management Services console by using an account that is a member of the Enterprise Admins group, and then register the Service Connection Point (SCP). D. Run the Active Directory Rights Management Services console by using an account that is a member of the Enterprise Admins group, and then configure the proxy settings.

Answer: C

QUESTION 327 Your network contains an Active Directory domain named contoso.com. The domain contains a server named Server1 that runs Windows Server 2012 R2. Server1 has the Active Directory Certificate Services server role installed and is configured to support key archival and recovery. You create a new Active Directory group named Group1. You need to ensure that the members of Group1 can request a Key Recovery Agent certificate. The solution must minimize the permissions assigned to Group1. Which two permissions should you assign to Group1? (Each correct answer presents part of the solution. Choose two.)

A. Read B. Auto enroll C. Write D. Enroll E. Full control

Answer: AD Explanation: * In Template, type a new template display name, and then modify any other optional properties as needed. On the Security tab, click Add, type the name of the users you want to issue the key recovery agent certificates to, and then click OK. Under Group or user names, select the user names that you just added. Under Permissions, select the Read and Enroll check boxes, and then click OK.

QUESTION 328 Hotspot Question Your network contains an Active Directory domain named contoso.com. The domain contains a domain controller named DC1 and a member server named Server1. All servers run Windows Server 2012 R2. You install the IP Address Management (IPAM) Server feature on Server1. From the Provision IPAM wizard, you select the Group Policy Based provisioning method and enter a GPO name prefix of IPAM1. You need to provision IPAM by using Group Policy. What command should you run on Server1 to complete the process? To answer, select the appropriate options in the answer area. Answer:

QUESTION 329 You have a server named DNS1 that runs Windows Server 2012 R2. You discover that the DNS resolution is slow when users try to access the company intranet home page by using the URL http://companyhome. You need to provide single-label name resolution for CompanyHome that is not dependent on the suffix search order. Which three cmdlets should you run? (Each correct answer presents part of the solution. Choose three.)

Answer: ABD Explanation: *The Add-DnsServerPrimaryZone cmdlet adds a specified primary zone on a Domain Name System (DNS) server. * The Add-DnsServerResourceRecordCName cmdlet adds a canonical name (CNAME) resource record to a specified Domain Name System (DNS) zone. A CNAME record allows you to use more than one resource record to refer to a single host *The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain Name System (DNS) queries. It also changes configuration settings for a GlobalNames zone. The GlobalNames zone supports short, easy-to-use names instead of fully qualified domain names (FQDNs) without using Windows Internet Name Service (WINS) technology. For instance, DNS can query SarahJonesDesktop instead of SarahJonesDesktop.contoso.com.

QUESTION 330 Your network contains three servers named HV1, HV2, and Server1 that run Windows Server 2012 R2. HV1 and HV2 have the Hyper-V server role installed. Server1 is a file server that contains 3 TB of free disk space. HV1 hosts a virtual machine named VM1. The virtual machine configuration file for VM1 is stored in D:\VM and the virtual hard disk file is stored in E:\VHD. You plan to replace drive E with a larger volume. You need to ensure that VM1 remains available from HV1 while drive E is being replaced. You want to achieve this goal by using the minimum amount of administrative effort. What should you do?

A. Perform a live migration to HV2. B. Add HV1 and HV2 as nodes in a failover cluster. Perform a storage migration to HV2. C. Add HV1 and HV2 as nodes in a failover cluster. Perform a live migration to HV2. D. Perform a storage migration to Server1.